Last updated:
1. Who we are
This website (www.noventradigitalai.com) is operated by Noventra Digital Ltd (“Noventra Digital”, “we”, “us”). We are the controller of the personal data described in this policy.
You can contact us about privacy by email at info@noventradigitalai.com, through our contact form, by post at Office 2193, 85 Dunstall Hill, Wolverhampton, WV6 0SR, United Kingdom, or by telephone on +44 7473 965069 (United Kingdom) or +92 322 8654411 (Pakistan).
2. What we collect
Information you give us
When you submit the project enquiry form we collect:
- your full name and business email address;
- your company name, if you provide it;
- your country and, if you provide it, your phone number;
- the service you are interested in and, if you choose, an indicative budget;
- the project description you write; and
- the date and time you agreed to this privacy policy.
The AI assistant
Our website has an AI assistant, Noventra. It is software, not a person. What you type is sent to our AI provider to generate replies. We do not save chat conversations. If you ask to start a project and agree to it in the chat, we store the details you give (name, business name, email, WhatsApp number, service, project description and budget) as an enquiry, in the same way as the enquiry form. Please don't share sensitive information in the chat.
Information collected automatically
- Technical request data. Like most websites, our hosting provider processes your IP address, browser type and the pages requested in order to deliver the site and keep it secure. These logs are kept for a short period.
- Abuse prevention. To stop spam and repeated automated submissions, we record a one-way cryptographic hash of your IP address together with a counter for a limited time window. We do not store your IP address in readable form for this purpose.
We do not use analytics, advertising or tracking cookies. See our Cookie Policy.
3. How we use your information and our lawful basis
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Responding to your enquiry and discussing your project | Steps taken at your request before entering into a contract, and our legitimate interest in responding to business enquiries |
| Keeping a record of enquiries and correspondence | Legitimate interests (managing business relationships) |
| Protecting the website from spam, fraud and abuse | Legitimate interests (security of our services) |
| Complying with legal obligations | Legal obligation |
We do not sell your personal data, and we do not use it for automated decision-making that has legal or similarly significant effects on you.
4. Who we share it with
We use trusted service providers who process data on our behalf under contracts that require them to protect it:
- Vercel Inc.: website hosting and delivery.
- Supabase Inc.: secure database storage of enquiries.
- Anthropic: the AI model that generates the assistant's replies, which receives the messages you type in the chat.
- Resend: delivery of an internal email notification when a new enquiry arrives, where enabled.
We may also disclose information if required by law or to protect our rights.
5. International transfers
Some of our providers may process data outside the United Kingdom. Where this happens, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
6. How long we keep it
We keep enquiries for as long as needed to respond and manage any resulting business relationship. Enquiries that do not lead to a project are reviewed and deleted within 24 months of our last contact with you. Abuse-prevention counters expire automatically after a short time window.
7. Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete your data;
- object to or ask us to restrict certain processing; and
- receive your data in a portable format, where applicable.
To exercise any of these rights, contact us using the details in section 1. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
Data is transmitted over HTTPS, stored in access-controlled systems and only available to authorised members of our team. No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.
9. Changes to this policy
We may update this policy from time to time. The “last updated” date at the top shows when it last changed.